Senior Agentic Infrastructure Engineer

Straddle, Inc.; Broomfield (CO); Hybride; USD 180 000 - 240 000; Plein temps

Résumé du poste

Straddle, Inc. is seeking an experienced Agentic Infrastructure Engineer to build, operate, and defend the platform that moves money. You’ll collaborate across platform engineering, DevSecOps, and security operations to deploy secure, observable systems and automated environments.

You will own production infrastructure and work toward agentic defenses that anticipate and mitigate threats. The role reports to the Head of Engineering and offers hybrid work with remote consideration for exceptional

Qualifications

• 7+ years in platform engineering, infrastructure, SRE, DevOps, or related discipline.
• Conviction and experience in AI-based development with agents.
• Cloud and automation depth with major cloud platforms, IaC, CI/CD, containers, networking, observability.
• Security fundamentals: least privilege, secrets management, network boundaries, secure deployment practices.

Responsabilités

• Own production platform through deployment, monitoring, and recovery.
• Build infrastructure for agentic engineering and ensure repeatable environments and workflows.
• Secure and manage agent infrastructures, credentials, and audit trails.
• Integrate security into daily operations, improve vulnerability management and recovery playbooks.
• Lead incident response with telemetry, runbooks, and post-incident improvements.
• Develop workflows to defend against agentic intrusions and test defenses.

Connaissances

AI-based development

Cloud platforms

Infrastructure as code

CI/CD

Observability

Security fundamentals

Vulnerability management

Incident response

Networking

Automation

Outils

Azure

Terraform

GitHub Actions

Description du poste

About Straddle, Inc.

Straddle is an open-banking payments platform for account-to-account money movement. We combine identity verification, fraud detection, and multi-rail payments, ACH, RTP, and soon FedNow, into a single API, so businesses can move money between bank accounts as easily as sending a text.
We’re headquartered in Broomfield, Colorado, building infrastructure for how modern businesses get paid. Teams are lean, decisions are quick, and layers are minimal. If you care about quality and velocity in equal measure, you’ll be in good company.

Senior Agentic Infrastructure Engineer — Platform & Security

Denver metro area preferred · Hybrid, with remote considered for exceptional candidates · Reports to the Head of Engineering

About the role

Straddle is building the infrastructure for better bank payments. We’re hiring an Agentic Infrastructure Engineer to build, operate, and defend the platform that moves money.

We’re committed to agentic engineering. You’ll work across platform engineering, DevSecOps, and security operations, using agents to build infrastructure, improve delivery, investigate incidents, and strengthen our defenses. You’ll also build the environments, permissions, and verification systems that let the rest of engineering do the same.

You are AI-pilled. You already use agents to do substantial engineering work, and you believe they will change how infrastructure is built, operated, and attacked. You know conventional defenses are a necessary foundation, but it won’t be enough for the world that’s emerging. You want to build defenses that hold up against adversaries using agents—and use agents yourself to detect, investigate, and respond.

This is a hands-on individual contributor role. You’ll report to the Head of Engineering and own production infrastructure and the systems that keep it reliable and secure.

We prefer candidates who can work from our Broomfield office at least three days per week. Remote arrangements are available for exceptional candidates.

What you’ll do

• Own the platform through production. Build and operate cloud infrastructure, networking, infrastructure as code, CI/CD, and developer environments. Make secure deployments easy, systems observable, and recovery dependable.


• Build the infrastructure for agentic engineering. Give engineers and agents repeatable environments, scoped access, and reliable workflows for provisioning resources, running checks, diagnosing failures, and shipping changes. Build verification, rollback, and recovery into the process.


• Secure our own agents. Design scoped identities, short-lived credentials, isolated execution environments, tool permissions, and audit trails. Test defenses against malicious instructions, compromised inputs, credential exposure, and misuse of access.


• Make security part of daily operations. Improve vulnerability management, secrets handling, access reviews, software supply chain security, and detection. Turn recurring investigations and manual procedures into tested automation.


• Own reliability and incident response. Improve telemetry, alerting, runbooks, and recovery procedures. Respond to production failures and security events, identify root causes, and make changes that prevent recurrence.


• Use agents to defend against agentic intrusions. Build workflows that proactively discover vulnerabilities and ship verified fixes before attackers can exploit them. Investigate suspicious activity, correlate evidence, and support containment and response. Test agent failure modes, measure effectiveness, and expand autonomy as they prove reliable.

Must-haves

• 7+ years in platform engineering, infrastructure, SRE, DevOps, or a closely related discipline , with meaningful ownership of production systems.


• Conviction and experience in AI-based development. Agents are central to how you work today. You’ve shipped substantial work with them and understand specification, decomposition, context management, and verification.


• Cloud and automation depth. Hands‑on experience with a major cloud platform, infrastructure as code, CI/CD, containers, networking, and observability.


• Security fundamentals and operational judgment. You understand least privilege, secrets management, network boundaries, and secure deployment practices. You can reason about compromised workloads and credentials, limit blast radius, and plan for recovery.

What else you bring

• Startup experience and urgency. You’ve shipped on a small team with limited resources and changing priorities. You keep scope tight and make practical decisions with incomplete information.


• An engineering approach to operations. You write and review code, debug across system boundaries, and build durable automation for recurring problems.


• A drive to build agentic defenses. You want to use agents to proactively discover vulnerabilities, prioritize risk, and ship verified fixes before attackers can exploit them. You also want to detect, investigate, and contain attacks, including those carried out by other agents. You evaluate agent performance against evidence and understand where human judgment remains necessary.


• Accountability after deployment. You stay responsible for what you ship, including changes produced by agents. You can explain how you verified a change, what could fail, and how you would recover.


• Clear communication. You write useful technical plans and runbooks, explain tradeoffs, and work effectively across engineering and security. You reconsider when the evidence changes.

Nice-to-haves

• Hands‑on cybersecurity or information security operations experience, including detection engineering, threat hunting, incident response, or SOC automation.


• Relevant security certifications such as CCSP, CISSP, or GCIH, or equivalent hands‑on experience securing cloud infrastructure and responding to incidents.


• Building security automation around SIEM, EDR, cloud audit logs, or identity systems.


• Securing agent tools and execution environments against prompt injection, data exfiltration, and excessive permissions.


• Azure, Terraform, and GitHub Actions experience.


• Building agent tooling, evaluation harnesses, or developer infrastructure that other engineers adopted.


• Experience operating payments or other critical financial infrastructure.


• Experience managing the technical implementation of SOC 2.

Interview process

We’ll assess your infrastructure judgment, security experience, and agentic engineering skills through practical evaluation. Expect to discuss systems you’ve owned, controls you’ve operated, and substantial work you’ve shipped with agents. We’ll explore what went wrong, how you investigated it, and how you determined the work was ready for production.